v0.2.4

• Removed write-capable commands (curl, wget, container CLIs, cloud CLIs, Terraform, Ansible, Vault, Consul) from the agent safe-mode allowlist; safe mode now runs only bare allowlisted command names with string-array args, rejecting combined shell strings and path-qualified executables.
• Changed: saved API keys are no longer shown as defaults during provider setup — leaving a key prompt blank keeps the existing key.
• Fixed the command editor drawing in the wrong place for commands that wrap, contain wide (CJK/emoji) characters, or span multiple lines.
• Fixed accented, CJK, and emoji keystrokes being dropped while editing a command.
• Fixed terminal-width detection using a static width of 80 instead of the real terminal size, so wrapped output now clears correctly.
• Fixed the REPL leaving a blank gap or stray rows below the input after slash-command previews on narrow terminals.
• Fixed the terminal being left with a hidden cursor and silenced input after a panic.
• Fixed verbose agent tool output being mangled (paths, globs, backticks) by markdown styling; it now prints verbatim.
• NO_COLOR and CLICOLOR_FORCE are now honored, with CLICOLOR_FORCE taking precedence over both NO_COLOR and tty detection.
• Fixed Ctrl-C in single-shot mode not cancelling the in-flight request; MCP servers now shut down and the terminal is restored on cancel.
• Config and prompt files are now written atomically, preventing corruption if a write is interrupted.
• [Gemini] Fixed multi-turn tool calls sending placeholder function names instead of the real ones; multi-part responses are now joined, and SAFETY/RECITATION blocks surface a clear error.
• [Ollama] Fixed empty assistant responses being accepted silently — they now return a clear error.
• [OpenAI-compatible] Fixed endpoint URLs for hosts that already include a versioned API path.
• Rate-limit handling now reads the Retry-After header, and invalid-API-key detection on 401/403 is tighter.
• Fixed MCP requests hanging indefinitely — each request now has a per-line read timeout and an overall 30-second deadline, and reports when a server exits unexpectedly.
• Fixed agent builtins: file reads are now size-bounded, fetch_url truncates on a UTF-8 char boundary, read_file reports actual bytes read, and exec-capable git -c keys are blocked.
• Shell completions now include verbose, agent-safe, prompt reset, and other recently added tokens across bash, zsh, and fish; removed a stray -- help token from the fish wrapper.
• uninstall now hardens shell-config and repository removal.
• AUR is only reported as the install method on actual Arch hosts.

Full Changelog: v0.2.3...v0.2.4

v0.2.3

Full Changelog: v0.2.2...v0.2.3

v0.2.2

Full Changelog: v0.2.1...v0.2.2

v0.2.1

Full Changelog: v0.2.0...v0.2.1

v0.2.0

Full Changelog: v0.1.5...v0.2.0

v0.1.5

Full Changelog: v0.1.4...v0.1.5

v0.1.4

Full Changelog: v0.1.3...v0.1.4

v0.1.3

Full Changelog: v0.1.2...v0.1.3

v0.1.2

Full Changelog: v0.1.1...v0.1.2

v0.1.1

Full Changelog: https://github.com/uwuclxdy/larpshell/commits/v0.1.1